
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json)
Hash identifier: iWPkVttNtLPa+6BW+WMm8gs56YqmowceUrBbPOzuFPE=
Subject key identifier: F3:9B:D8:FF:78:1D:CA:5C:47:9B:89:FE:ED:0E:3D:FD:5F:29:08:C7
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
Manifest number: CE
Signing time: Sun 05 Apr 2026 06:11:48 +0000
Manifest this update: Sun 05 Apr 2026 06:11:47 +0000
Manifest next update: Sun 12 Apr 2026 06:11:47 +0000
Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: BM4Qt6O4bI/uEyPA2vgqn4hcT3BQ7DHXRkPcuVEX4pw=)
2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: wMZyhnBV4sS1OoXti8AOYy1UKjGrlLJQob0X/T9aUpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Validity
Not Before: Apr 5 06:11:47 2026 GMT
Not After : Apr 12 06:11:47 2026 GMT
Subject: CN=69d1fd24-76ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:78:dc:e1:8b:46:9b:d6:02:f2:04:9d:ac:
49:2e:e9:58:1a:01:e8:1e:95:f3:e7:e9:d8:d0:ef:
65:0a:cf:07:2a:d1:e5:b0:6c:4c:ab:08:46:87:d8:
25:04:5a:29:79:80:e0:95:3d:48:4a:e8:35:51:f6:
97:5f:91:9b:05:c9:93:9d:4a:ec:9f:d1:d6:db:93:
0d:e2:52:12:50:b1:b7:ca:71:a1:c0:a4:aa:68:20:
66:81:cb:84:fc:46:c3:cf:9d:68:74:77:f8:92:50:
94:80:f7:34:e4:e3:e6:82:9b:e2:5e:ea:b8:c0:57:
85:5e:01:83:c7:e0:5b:f7:57:e1:8a:b1:0a:d6:80:
f1:c0:e5:a5:60:fb:7b:b5:99:ea:cd:9f:39:ee:79:
46:fa:0c:08:f2:7d:34:25:0f:a6:76:17:8d:62:28:
e6:4c:21:d8:08:2f:15:00:a9:c0:78:41:d9:ab:e7:
14:fa:e7:ff:40:30:9c:ae:05:c8:fe:fc:32:47:9e:
e6:4c:94:a3:a8:47:50:48:87:ef:0d:eb:4a:3d:fd:
de:d9:14:87:a2:d9:f9:98:ce:f2:48:fa:8e:b1:cf:
44:f4:b5:19:7d:05:f3:75:45:25:75:2a:91:a1:93:
35:e6:c1:17:d0:74:43:b8:2e:74:90:c6:69:3a:66:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:D8:FF:78:1D:CA:5C:47:9B:89:FE:ED:0E:3D:FD:5F:29:08:C7
X509v3 Authority Key Identifier:
keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:77:18:96:a6:87:64:32:14:90:0a:f2:90:dc:83:f9:06:
dc:b7:aa:73:c2:00:59:3f:04:20:7d:26:ec:da:d0:62:bf:cc:
5e:b4:35:fc:13:e5:39:4b:a2:9e:51:bb:03:88:9c:09:d3:f4:
f3:84:40:bf:25:62:41:43:3b:64:ec:22:18:70:d2:81:f2:52:
11:0c:70:9c:d3:90:39:44:44:d5:63:12:de:29:81:28:b5:1e:
f6:ff:24:c0:94:a1:03:3d:d2:18:4d:3e:51:b5:f6:56:0b:c2:
98:fa:12:2f:15:10:88:8a:91:04:1d:6b:22:ea:27:f0:47:d9:
6e:8d:81:6b:64:51:85:54:08:47:b2:d2:38:cd:47:b0:1d:39:
56:3d:7e:0d:47:76:8c:1d:4c:ab:cf:a0:dd:14:2c:91:91:7c:
2a:e5:ec:a3:d9:6e:44:57:76:17:c2:a6:c4:34:99:4b:b9:c6:
8a:a7:62:87:5e:60:4e:ed:77:89:8c:f9:c4:d9:1e:5d:13:7f:
21:84:dd:a1:50:da:a7:9b:63:d0:26:91:1a:94:62:11:4e:1c:
7b:1b:5d:ff:8c:75:e6:7b:7c:34:e5:88:dc:5b:fe:16:9b:10:
db:f8:75:10:ce:d9:be:78:6f:b8:25:5c:dc:94:4e:21:46:93:
56:78:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:57 2026 by rpki-client